Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IrHIV0CSvd_bqTcGhaVfetfaU4g.cer
File: IrHIV0CSvd_bqTcGhaVfetfaU4g.cer (raw, json)
Hash identifier: l0sf1LBlS5P8D8HhRlknmCXuBKcEToJM4XYhy0ZXfVw=
Subject key identifier: 22:B1:C8:57:40:92:BD:DF:DB:A9:37:06:85:A5:5F:7A:D7:DA:53:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56DF8780EAF27BC2A0FE4E1362E928E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/6c2fd8-d95a-4b1c-b7a2-c0fe8f6370b7/1/IrHIV0CSvd_bqTcGhaVfetfaU4g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/6c2fd8-d95a-4b1c-b7a2-c0fe8f6370b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 213188
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Apr 2024 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f8:78:0e:af:27:bc:2a:0f:e4:e1:36:2e:92:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22b1c8574092bddfdba9370685a55f7ad7da5388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:39:5e:fd:99:60:cf:e9:dc:f7:e6:dd:17:
ba:35:f9:cb:78:b9:cc:58:f9:09:12:6e:ac:94:3d:
31:4d:2a:1d:34:d4:91:6e:66:d5:8d:0a:17:7e:3f:
f6:d6:36:9a:83:7e:21:15:ab:2c:12:f3:2e:6a:61:
57:43:ec:f4:3b:e1:da:46:fc:2c:30:4d:76:55:4c:
5a:75:18:bf:b4:3d:23:02:88:90:e4:d1:1f:db:5f:
32:e4:27:7f:47:62:70:ea:12:2f:5e:d1:0b:c5:04:
59:b5:81:77:cc:56:6e:1a:a4:54:80:de:19:14:f5:
4e:1d:3b:98:a0:02:08:48:f4:1b:56:85:c1:e0:bb:
75:a7:50:50:41:b8:8c:b3:cd:bc:8b:6c:a2:c3:17:
fd:71:28:ba:37:f9:b0:5c:af:9b:7c:ed:cb:a1:6f:
06:3c:6b:08:8d:b3:69:00:01:32:ac:8b:3c:e0:17:
be:5e:08:3f:6b:7c:ba:b9:02:7a:c0:f3:db:ab:21:
c9:3f:68:b3:5c:c8:e5:29:f3:01:f0:cf:5e:b3:39:
f4:fb:11:66:5c:f8:db:72:e0:c7:42:5a:63:0d:39:
db:22:76:88:2e:e0:f0:f2:e3:b5:10:89:da:8a:52:
a0:34:7a:e9:84:f3:64:2c:7e:c2:40:3f:46:c5:59:
2b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B1:C8:57:40:92:BD:DF:DB:A9:37:06:85:A5:5F:7A:D7:DA:53:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c2fd8-d95a-4b1c-b7a2-c0fe8f6370b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6c2fd8-d95a-4b1c-b7a2-c0fe8f6370b7/1/IrHIV0CSvd_bqTcGhaVfetfaU4g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213188
Signature Algorithm: sha256WithRSAEncryption
24:89:62:20:5e:d8:cd:10:ff:d2:e0:27:c6:89:e5:7d:b4:21:
39:d0:59:83:dc:69:a3:9f:9c:f0:7f:d9:27:ba:e5:8d:17:3e:
09:90:74:88:90:ad:13:79:07:8f:35:38:7b:7e:40:5a:72:c3:
5e:5a:0d:39:d7:12:4f:02:19:e3:9a:63:ec:4f:34:fe:99:5d:
cd:b2:7a:a2:d4:9d:0b:54:f5:c3:54:8f:08:64:27:3c:ac:1f:
45:15:32:44:52:c7:81:29:0c:63:7f:67:12:c1:89:ec:20:9e:
25:01:7d:60:55:6f:15:66:94:5f:25:ff:85:1d:fd:31:5b:9d:
a0:10:64:c4:76:c3:69:6c:ee:62:09:de:82:56:9b:8f:28:09:
37:8e:fe:12:5c:ec:b4:4c:b2:c1:ed:50:4e:3a:08:51:31:b0:
ba:8b:f5:e6:23:9b:c9:15:5d:ce:6f:8e:ad:2a:28:d3:ce:38:
af:2c:8c:99:40:7e:25:f9:28:f5:fb:f9:64:f7:d5:7c:4d:dc:
31:6d:93:89:a7:58:78:f1:25:f1:11:6b:8c:cb:12:94:a5:ba:
b8:7d:37:f7:35:88:00:8d:36:d0:be:fa:1f:c6:fa:3b:02:bb:
bc:d2:bd:74:9b:10:ba:3e:55:df:7f:08:f9:2d:c7:19:50:d2:
94:48:8c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 20:29:03 2024 by rpki-client on console-ams.rpki-client.org